27a39a3f9ca6532b173fee2ccf1ae5ae | Triage

Sharing

General

Target

27a39a3f9ca6532b173fee2ccf1ae5ae
Size

25KB
MD5

27a39a3f9ca6532b173fee2ccf1ae5ae
SHA1

802f92f3e3e8cc923b74425c61e193292b391ee3
SHA256

83dbaddd7b69e01160ce29c61663c9f92735077859b3d1ab6506b70f1e4a7f29
SHA512

3b5125c548dfab43921c797ad02df7d08ee9c41bd0c253f616cdb8bd5fde34bba49a0691483bd5801c2ed84137a6ec522a2969c4648a55d34cef3674324dfa90
SSDEEP

768:6ySf2KZRO+3xPiyFOE9rjcQH8DsQV7nN:6ySnbBqyFO/NVZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27a39a3f9ca6532b173fee2ccf1ae5ae

Files

27a39a3f9ca6532b173fee2ccf1ae5ae
.exe windows:4 windows x86 arch:x86

33474628c7b7faf51e9b6fcb80bfe0ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

kernel32

GetModuleHandleW
GetStringTypeW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle

gdi32

Chord
DPtoLP
CreatePen
EnumICMProfilesW
ExcludeClipRect
BitBlt
Arc

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE